Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/22d1919e-52b9-3dd2-9d12-fc589df2a770.roa
File:                     22d1919e-52b9-3dd2-9d12-fc589df2a770.roa (raw, json)
Hash identifier:          /5k54YDcvGvL5h4DwU5HHXKjMMkn9krhdODGFTiiw5s=
Subject key identifier:   6F:A0:6B:7A:AA:80:12:BD:D7:12:BE:46:6D:0B:78:1A:41:71:0E:12
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847EFEF93A38172598D26A914C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/22d1919e-52b9-3dd2-9d12-fc589df2a770.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     44477
IP address blocks:        23.27.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:93:a3:81:72:59:8d:26:a9:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=1474db09-8951-4c9c-bbc5-6954657c50c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:1b:8e:b9:24:ce:45:3b:ab:67:61:c9:ee:
                    0a:bc:70:d7:ed:72:ba:21:df:48:f2:f7:7d:f2:26:
                    68:b0:8e:f7:c5:d7:a9:14:3e:ec:d4:b5:de:d7:54:
                    81:5f:88:8c:0b:3b:93:30:ac:84:9a:39:91:5a:54:
                    42:5a:11:80:5e:ac:0b:40:fb:96:cd:22:fa:25:86:
                    2b:6c:a7:68:15:0b:25:5c:16:6e:5f:ad:29:4e:9e:
                    86:4f:92:f0:3e:d3:33:65:f7:7a:d4:8d:98:66:3e:
                    a1:3f:ae:83:35:02:12:21:94:6b:ff:41:74:8e:1a:
                    a1:18:43:24:6f:e5:a4:6e:9a:86:c2:63:bc:a6:4e:
                    85:cb:0c:07:b5:96:9d:03:29:56:d7:6a:37:6d:00:
                    dc:5e:d0:91:5c:88:d8:91:9f:e5:41:4a:8d:f4:43:
                    21:a1:d5:dd:70:d4:e8:ad:65:2a:1e:44:b8:07:30:
                    e8:f9:23:e3:9f:bd:0e:9a:ab:fd:04:54:9f:21:be:
                    ee:16:37:7b:e0:65:86:48:b2:bf:8b:f9:a6:6b:fe:
                    3c:99:2e:16:3e:62:49:12:4c:37:34:a9:2c:11:6f:
                    89:38:63:83:19:cf:e7:91:b0:1c:3f:55:de:5b:e7:
                    92:79:68:eb:02:cc:d0:fb:9b:da:0c:46:8b:49:12:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:6B:7A:AA:80:12:BD:D7:12:BE:46:6D:0B:78:1A:41:71:0E:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/22d1919e-52b9-3dd2-9d12-fc589df2a770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:4d:64:83:f1:af:6b:34:3e:57:1c:7f:84:43:61:ab:b1:
         7c:50:2f:d1:dd:61:28:25:d0:4e:80:82:a1:02:5a:07:15:20:
         26:77:e0:21:67:a4:06:05:86:0d:a1:d1:8c:6f:b5:df:b5:d5:
         e8:71:8c:d0:44:bf:c7:1d:af:da:07:13:dd:c8:c7:99:6f:de:
         ae:24:37:df:45:64:e1:c9:47:7d:6b:fc:a1:ab:8b:48:78:4f:
         d6:c5:53:ae:10:fa:85:98:ad:d6:7f:ca:e1:52:d6:3f:ef:1f:
         fb:a5:a5:e1:76:4c:d7:8f:de:bb:45:0e:9a:a1:50:32:33:4f:
         d8:9a:f2:67:7b:3b:a9:bb:02:b3:36:c1:54:ae:2b:01:9a:b3:
         00:1d:7b:25:c5:61:4d:fa:06:40:a8:8c:21:b5:28:32:b1:2a:
         ca:a6:e9:60:8d:a9:01:e4:2b:ff:a4:8a:bb:a1:82:39:77:32:
         d8:69:c8:6e:bb:c2:15:72:90:43:e7:bf:45:3d:0f:10:53:e4:
         b8:a8:55:1e:62:12:0a:8a:bb:98:f7:9d:dc:38:88:cb:7a:a0:
         9d:7c:14:8d:6d:37:aa:e8:22:63:ca:7e:1d:74:31:bd:cc:7a:
         9a:35:0a:53:58:59:38:7b:52:48:3d:74:53:84:81:be:02:32:
         5d:da:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:59 2025 by rpki-client